Octri

mcp audit

Lists every write an agent attempted, approved or not, newest first: when, the tool and request, the outcome, and who sent it. It needs Keep an audit log of writes on, and how long entries are kept depends on your plan. See audit log.

bash
octri mcp audit [list | export] [filters]

Flags

--tool <name>string

Only one tool.

--outcome <outcome>string

Only one outcome: ok, error, declined, blocked or limited.

--source <source>string

Only one source: hosted, installation or self_hosted.

--who <identity>string

Only one person or installation.

--from <date>string

From this date or time. A bare day such as 2026-11-01 starts at midnight UTC.

--to <date>string

Up to this date or time. A bare day includes the whole day, in UTC.

--limit <n>numberdefault: 50

How many to list, up to 200.

--cursor <id>string

Where the next page starts, from the last line of the previous one.

octri mcp audit export

Saves every matching entry, with arguments already redacted. It takes the same filters.

Flags

--format <format>stringdefault: csv

csv or json.

--out <path>pathdefault: the current folder

A file name, or a folder to save into.

Examples

Declined writes this month

bash
octri mcp audit --outcome declined --from 2026-11-01
Output
✔ Loading the audit log

MCP audit log (3, kept 90 days)
  WHEN    TOOL              REQUEST           OUTCOME   WHO
  ──────  ────────────────  ────────────────  ────────  ──────
  5d ago  createCustomer    POST /customers   declined  hosted
  5d ago  createCustomer    POST /customers   declined  hosted
  5d ago  createCustomer    POST /customers   declined  hosted

Export for a review

bash
octri mcp audit export --format csv --out audit.csv
Output
✔ Exporting the audit log
✔ Saved ./audit.csv (3.0 KB)